• We just launched and are currently in beta. Join us as we build and grow the community.

How to Recover Deleted File from RAW Image using FTK Imager and Recover My File

mrbalap2st

Error Tracker
M Rep
0
0
0
Rep
0
M Vouches
0
0
0
Vouches
0
Posts
101
Likes
70
Bits
2 MONTHS
2 2 MONTHS OF SERVICE
LEVEL 1 500 XP
How to create Disk Image read this article

http://www.hackingarticles.in/how-to-create-copy-of-suspects-evidence-using-ftk-imager/

After installing the program, run it. In the window that shall appear, click on the option “File” and “Image Mounting.

1.png


Now select the image file to mount image to drive.

3.png


In the window “Mount Image to Drive”, choose the forensic image that shall be mounted and select The Drive letter and click on mount option

2.png


Now it will show the mounted image as G: Drive in your system.

3.1.png


Now, download Recover my file from here after installing, run the program. In the window let´s choose the option “Recover files” and click on next.

4.png


In the next window l choose the option “In a specific location” and indicate the mounted drive through FTK Imager. Now click on “Next”.

5.png


Now select search for deleted files option and click on start.

6.png


Now it will show all the deleted files, which are recovered and now select your desired deleted file and save in your pc.

7.png


Author:
Mukul Mohan
is a Microsoft Certified system engineer in security and messaging .He is a Microsoft Certified Technology Specialist with high level of expertise in handling server side operations based on windows platform. An experienced IT Technical Trainer with over 20 years’ Technical Training experience you can contact him at [email protected].
 

421,687

310,507

310,516

Top